Senior Software Engineer – User Management

• Design, build, and run features in the User Management API, including tenant and landscape lifecycle, user and group administration, role-based access control, service accounts, client credentials, and audit and security tooling
• Own Okta and Microsoft Entra ID integrations, including provisioning, lifecycle synchronization, event handling, and app-registration automation
• Maintain safe and recoverable integration failure modes
• Maintain the API authentication model and authorization rules
• Change and version gRPC and REST contracts and coordinate SDK releases
• Manage secrets using Azure services
• Support multi-tenancy, auditing, and data integrity across tenants
• Write NUnit and Moq unit tests, integration tests, and automated smoke suites focused on authentication, permissions, and tenant isolation
• Collaborate with frontend engineers on sign-in and admin experiences
• Work with product teams consuming the platform through the SDK
• Participate in on-call and incident response for the PowerPlan cloud service
• Within the first 90 days, run the identity stack locally, explain the portal-to-authorized-API flow, and ship a change spanning at least two services
• Within the first year, own a major platform area, improve test coverage and observability, and advise product teams on identity questions

• 5+ years building production back-end services in C# / .NET
• Experience with ASP.NET Core Web API, dependency injection, and async patterns
• Hands-on identity and access management experience
• Experience with OAuth 2.0 and OpenID Connect, including authorization code with PKCE, client credentials, token validation and refresh
• Experience with JWT claims design, validation against multiple issuers and audiences, signing keys, and key rotation
• Experience with multi-tenant user, role, and permission models, including tenant isolation
• Experience with user lifecycle management and synchronization with an external identity provider
• Production experience with at least one enterprise identity provider: Okta, Microsoft Entra ID / Azure AD, Auth0, Ping, or another provider
• Solid relational database skills with SQL Server and EF Core, including migrations and query performance
• Experience designing and versioning REST APIs; ideally gRPC / Protocol Buffers
• Knowledge of OWASP Top 10
• Ability to handle secrets carefully, write auditable code, and apply least-privilege principles
• Nice to have: Okta Management API / SDK, Okta event hooks and inline hooks, or Okta Identity Engine (IDX)
• Nice to have: Microsoft Graph, especially app registrations, service principals, and credential management
• Nice to have: SAML 2.0, SCIM provisioning, or enterprise SSO federation
• Nice to have: Azure Key Vault, App Configuration, Managed Identity, and Data Protection
• Nice to have: internal NuGet package publishing and versioning using GitVersion and Conventional Commits
• Nice to have: Angular or another modern front-end framework
• Nice to have: regulated-industry experience
• Nice to have: familiarity with AI-assisted development tools

• Remote work availability
• Excellent work environment certified by Great Place To Work
• Multicultural company environment
• On-call and incident response participation